Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 4105 Source: Microsoft-Windows-TerminalServices-Licensing

Level
Description
The Terminal Services license server cannot update the license attributes for user "jdoe" in the Active Directory Domain "compdomain". Ensure that the computer account for the license server is a member of Terminal Server License Servers group in Active Directory domain "compdomain".
If the license server is installed on a domain controller the Network Service account also needs to be a member of the Terminal Server License Servers group.
If the license server is installed on a domain controller after you have added the appropriate accounts to the Terminal Server License Servers group you must restart the Terminal Services Licensing service to track or report the usage of TS Per User CALs.
Win32 error code: 0x80070005
Comments
 
T775179 suggests that this issue can be solved by adding the license server to the Terminal Server License Servers group and restarting the Terminal Services Licensing service.

There are 3 types of situations when this may be recorded:
1. The license server is not a member of the Terminal Server License Servers group in the domain in which the users reside.
2. The license server is installed on a domain controller, and the Network Service account is not a member of the Terminal Server License Servers group.
3. If the user accounts existed before the domain was upgraded to Windows Server 2003, the Terminal Server License Servers group might be missing in the discretionary access control list (DACL) of the user objects in Active Directory directory service. Or, the group is in the DACL, but the group does not have permissions to update the Terminal Services Licensing information for the user account.

The ME2030310 article provides information about two ways of fixing this.
Make sure, the domain group "Terminal Server License Servers" has the following permissions to the active directories users:
- Open Active Directory Users And Computers
- Tick View -> Advanced
- Right click on the root of your domain and select properties.
- Select the Security tab.
- Check if "Terminal Server License Servers" is listed with special permissions. If not, click on "Advanced" and add the domain group "Terminal Server License Servers", select "Applies onto" "User objects", then tick the permissions "Read Terminal Server License Servers" and "Write Terminal Server License Servers".

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...